Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/6tHk6eIBnDhHGeHpQHlIBnkdJog.roa
File:                     6tHk6eIBnDhHGeHpQHlIBnkdJog.roa (raw, json)
Hash identifier:          hWGjSFPIzDBFi6cuNYGoRieg7IFLzwrQZQ1R6W7oIfw=
Subject key identifier:   EA:D1:E4:E9:E2:01:9C:38:47:19:E1:E9:40:79:48:06:79:1D:26:88
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       2B
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/6tHk6eIBnDhHGeHpQHlIBnkdJog.roa
Signing time:             Wed 01 Feb 2023 01:30:26 +0000
ROA not before:           Wed 01 Feb 2023 01:30:26 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        61.193.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:26 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=EAD1E4E9E2019C384719E1E940794806791D2688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c8:e4:c5:fd:c2:02:19:c0:32:cf:9e:5b:da:
                    f0:12:0f:3c:bb:92:72:4e:d1:a5:06:33:26:76:a3:
                    0e:79:b2:c0:ea:8f:b7:15:d7:e9:3e:1c:d0:cd:56:
                    30:3a:dd:dd:b5:cb:c1:61:ab:44:5b:29:8b:76:38:
                    57:cb:01:61:df:b9:3d:87:11:37:d6:93:81:c8:52:
                    f9:88:11:55:39:01:cc:b3:09:be:83:61:0d:5d:62:
                    98:5f:c0:aa:84:5f:71:05:2f:99:3a:96:6c:25:bf:
                    9b:da:dc:c1:76:5a:75:7d:2b:5e:84:2c:4c:73:fe:
                    ee:77:23:35:30:67:d0:08:ee:13:ce:94:92:59:a9:
                    f0:f1:7d:88:ba:ca:7a:94:b0:c6:cd:7f:e2:d2:9f:
                    6d:8a:4e:a6:91:50:7a:08:d6:74:12:c4:a2:40:08:
                    3b:e1:e7:8e:48:7b:30:49:32:8c:27:c6:ae:45:d6:
                    ab:84:b1:5d:53:2f:d3:7c:49:64:86:72:38:1a:82:
                    56:df:2c:fb:83:01:ac:61:d2:bd:5b:f7:94:32:87:
                    89:fb:34:3f:e3:a9:0e:25:6f:d2:73:02:65:fb:96:
                    19:6c:09:98:f7:07:a0:95:c2:f5:db:9f:fd:c7:a9:
                    bd:55:7e:07:cf:d3:b8:66:49:a1:6b:fb:3c:5f:05:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:E4:E9:E2:01:9C:38:47:19:E1:E9:40:79:48:06:79:1D:26:88
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/6tHk6eIBnDhHGeHpQHlIBnkdJog.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:7d:2a:79:bb:32:01:c2:e4:42:d9:8a:48:22:d6:6d:ce:8e:
         b4:6f:00:63:2e:4f:fc:be:3d:d1:d6:ba:63:27:c6:b0:6c:b3:
         17:52:d0:92:18:9e:5b:b1:a5:3f:45:65:63:aa:00:4c:30:73:
         48:fd:60:97:fe:a8:e9:c1:dd:ed:65:cc:0e:0b:25:e8:49:2f:
         13:3c:88:f1:2b:ff:19:d8:a5:3e:ad:75:03:e9:1e:be:b2:a5:
         6b:64:f1:ef:0c:81:dd:76:b0:ce:3c:f9:09:cd:d3:9c:25:72:
         cb:d4:f4:3c:57:d2:fa:54:c3:2c:a0:ad:a1:fb:c0:1b:53:cd:
         95:a5:93:f9:6a:cd:c6:52:36:15:0a:04:27:76:a8:89:f5:58:
         5e:2a:7d:9b:86:3a:05:e7:9e:b4:2c:dd:51:3b:ee:5f:b1:ea:
         36:82:4d:ae:dc:fd:a3:27:12:a5:55:a8:4e:e1:de:7e:fa:44:
         6a:92:d6:fc:63:17:22:2f:dc:b3:08:70:4a:01:8a:28:96:9d:
         53:7c:7d:be:9d:32:ec:36:ee:64:b6:97:f3:a3:fb:92:09:06:
         fe:e2:60:31:be:05:51:60:49:2d:88:d8:f9:53:29:3d:45:7d:
         4f:5b:cc:38:74:92:47:16:4b:37:9d:2d:c9:e5:d9:3a:7d:a2:
         d8:3f:fa:53
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTIzMDIwMTAx
MzAyNloXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoRUFEMUU0RTlFMjAxOUMz
ODQ3MTlFMUU5NDA3OTQ4MDY3OTFEMjY4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPHI5MX9wgIZwDLPnlva8BIPPLuSck7RpQYzJnajDnmywOqPtxXX
6T4c0M1WMDrd3bXLwWGrRFspi3Y4V8sBYd+5PYcRN9aTgchS+YgRVTkBzLMJvoNh
DV1imF/AqoRfcQUvmTqWbCW/m9rcwXZadX0rXoQsTHP+7ncjNTBn0AjuE86Uklmp
8PF9iLrKepSwxs1/4tKfbYpOppFQegjWdBLEokAIO+Hnjkh7MEkyjCfGrkXWq4Sx
XVMv03xJZIZyOBqCVt8s+4MBrGHSvVv3lDKHifs0P+OpDiVv0nMCZfuWGWwJmPcH
oJXC9duf/cepvVV+B8/TuGZJoWv7PF8F6P0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTq0eTp4gGcOEcZ4elAeUgGeR0miDAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDAvNnRIazZlSUJuRGhIR2VIcFFIbElCbmtkSm9nLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBT3BoDANBgkqhkiG9w0BAQsFAAOCAQEAin0qebsyAcLkQtmKSCLWbc6OtG8A
Yy5P/L490da6YyfGsGyzF1LQkhieW7GlP0VlY6oATDBzSP1gl/6o6cHd7WXMDgsl
6EkvEzyI8Sv/GdilPq11A+kevrKla2Tx7wyB3Xawzjz5Cc3TnCVyy9T0PFfS+lTD
LKCtofvAG1PNlaWT+WrNxlI2FQoEJ3aoifVYXip9m4Y6BeeetCzdUTvuX7HqNoJN
rtz9oycSpVWoTuHefvpEapLW/GMXIi/cswhwSgGKKJadU3x9vp0y7DbuZLaX86P7
kgkG/uJgMb4FUWBJLYjY+VMpPUV9T1vMOHSSRxZLN50tyeXZOn2i2D/6Uw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:58 2025 by rpki-client